On 2009-12-16, at 11:24 AM, Bert Freudenberg wrote:
> On 16.12.2009, at 18:43, Eliot Miranda wrote:
>>> In the bright rosy future concoct a convincing story around capabilities or mirrors which carefully modulate use of these facilities so they can't be misused.
>> That's exactly my point - I don't see how you could do a safe capability-based system with those primitives that can work around any encapsulation and hence can circumvent any capabilities.
Just make the primitives refuse to violate encapsulation for any receiver that's not a Mirror.
Colin